Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All
Appending a Domain Suffix to a Username
The VPN to which a user is to be terminated is sometimes known from the IKE identities attached to the user. However, to assist in connecting users to the correct AAA domain for authentication, you can append a domain suffix to the username. Using the default, no domain suffix, passes usernames transparently to AAA.
To append a domain suffix to user-provided usernames on a profile:
- From IPsec Tunnel Profile Configuration mode, append a
domain suffix.host1(config-ipsec-tunnel-profile)#domain-suffix domain2
Use the no version to restore the default value, no domain suffix, and usernames are passed transparently to AAA.
